didericis
8774e94f91
The demo has been unrunnable since eafd1c1f deleted bot-bottle.demo.json
as a pre-YAML-migration artifact. demo-setup.sh still copied that file
under `set -euo pipefail`, so demo.sh and demo-record.sh both exited
non-zero before launching anything.
Rebuild the fixtures in the current per-file Markdown format. Bottles
are only read from $HOME/.bot-bottle/bottles/ — manifest/index.py
ignores a bottles/ dir in CWD by design (PRD 0011) — so setup now
installs into real config and pairs every write with a .demo-backup
that teardown restores. Teardown compares content before removing, so
a second run cannot delete the user's restored original.
Point the DLP probe at the bottle's own example.org route rather than
api.anthropic.com/dlp-probe. The provider-injected anthropic route
defaults to `redact`, which would forward a scrubbed request instead of
refusing; the declared route sets outbound_on_match: block so probe 3
stays the hard 403 the demo is showing off. Left at the default
`supervise` it would instead hold the request open for up to 300s
awaiting operator approval and stall the recording.
Also drop the stale pipelock naming from the tape (egress is the
gateway's own scanner now), fix demo.sh's ./cli.py invocation, and
pre-warm Dockerfile.gateway instead of the removed Dockerfile.git-gate.
Refs #540
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
79 lines
2.9 KiB
Bash
Executable File
79 lines
2.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Stage everything the recorded demo needs, then hand off to demo.sh or
|
|
# demo-record.sh:
|
|
# - install scripts/demo/{bottle,agent}.md into $HOME/.bot-bottle/,
|
|
# backing up anything already sitting at those paths
|
|
# - create a dummy SSH identity where the demo bottle's git-gate
|
|
# expects one
|
|
# - pre-warm the agent + gateway images quietly so the recording
|
|
# doesn't spend its first 30s in BuildKit output
|
|
#
|
|
# Bottles can only be read from $HOME/.bot-bottle/bottles/ — a bottles/
|
|
# dir in CWD is ignored by design (manifest/index.py, PRD 0011) — so
|
|
# unlike the old throwaway manifest swap this writes into real config.
|
|
# Every write is paired with a .demo-backup so demo-teardown.sh can put
|
|
# things back exactly as they were; teardown is trapped by both
|
|
# callers and is safe to run twice.
|
|
|
|
set -euo pipefail
|
|
|
|
cd "$(dirname "$0")/.."
|
|
|
|
if ! docker info >/dev/null 2>&1; then
|
|
echo "demo-setup: docker daemon not reachable" >&2
|
|
exit 1
|
|
fi
|
|
|
|
config_root="${BOT_BOTTLE_ROOT:-$HOME/.bot-bottle}"
|
|
mkdir -p "$config_root/bottles" "$config_root/agents"
|
|
|
|
# Install one demo file, preserving whatever was there. The backup
|
|
# suffix is deterministic so teardown needs no state file. A stale
|
|
# backup from a killed run would be restored over the new install, so
|
|
# refuse rather than silently clobber it.
|
|
install_demo_file() {
|
|
src=$1
|
|
dest=$2
|
|
if [ -e "$dest.demo-backup" ]; then
|
|
echo "demo-setup: $dest.demo-backup already exists — a previous run" >&2
|
|
echo " did not tear down cleanly. Inspect it, then remove or restore" >&2
|
|
echo " it by hand before re-running." >&2
|
|
exit 1
|
|
fi
|
|
if [ -e "$dest" ]; then
|
|
mv "$dest" "$dest.demo-backup"
|
|
fi
|
|
cp "$src" "$dest"
|
|
}
|
|
|
|
install_demo_file scripts/demo/bottle.md "$config_root/bottles/demo.md"
|
|
install_demo_file scripts/demo/agent.md "$config_root/agents/demo.md"
|
|
|
|
# Dummy SSH identity — the git-gate validator wants a readable file at
|
|
# the key path. Contents don't matter for the demo: the unreachable
|
|
# upstream means the gate never actually uses the key.
|
|
fake_key_dir="$HOME/.cache/bot-bottle-demo"
|
|
mkdir -p "$fake_key_dir"
|
|
chmod 700 "$fake_key_dir"
|
|
printf 'not-a-real-key\n' > "$fake_key_dir/fake-key"
|
|
chmod 600 "$fake_key_dir/fake-key"
|
|
|
|
# Build the image graph quietly so the recorded run shows only the
|
|
# bottle launch and the four probes, not BuildKit progress.
|
|
node_base_image=$(
|
|
python3 -c \
|
|
'import json; print(json.load(open("image-build-args.json"))["NODE_BASE_IMAGE"])'
|
|
)
|
|
python_base_image=$(
|
|
python3 -c \
|
|
'import json; print(json.load(open("image-build-args.json"))["PYTHON_BASE_IMAGE"])'
|
|
)
|
|
docker build -q \
|
|
--build-arg "NODE_BASE_IMAGE=$node_base_image" \
|
|
-f bot_bottle/contrib/claude/Dockerfile \
|
|
-t bot-bottle-claude:latest . >/dev/null 2>&1 || true
|
|
docker build -q \
|
|
--build-arg "PYTHON_BASE_IMAGE=$python_base_image" \
|
|
-f Dockerfile.gateway \
|
|
-t bot-bottle-gateway:latest . >/dev/null 2>&1 || true
|